【摘要】 网络地址转换(NAT)网关实现逻辑上隔离的内外网互访是当前常用的网络互连方法,也是解决IPv4地址紧张的一种方案。文中着重分析了Linux2.4.x版下建立在内核防火墙Netfilter框架上的NAT的实现机制,然后通过一个例子描述了运用Linux的防火墙管理工具iptables实现局域网内主机共享IP访问Internet和允许外网访问局域网主机服务的具体方法。实践证明运行在Netfilter机制上的网络地址转换是可靠的。更多还原

【Abstract】 Gateway based on network address translation (NAT) is a common way used to implement access mutually between Intranet and Extranet at present.This paper analyses the implementation mechanism of NAT built in the firewall framework netfilter of Linux2.4.x, and introduces how to implement LAN access Internet and allow Extranet to access services supported by hosts of LAN through NAT based on Linux.The practice results prove that NAT which run in Netfilter is reliable.更多还原